The Maine Office of the Attorney General reported that Georgetown Financial Group (GFG) experienced a data breach involving unauthorized access to an employee's email account from January 30 to February 1, 2023. The incident potentially affected 466 individuals, including 2 Maine residents, and involved the compromise of Social Security Numbers. Written notification to affected individuals began on August 11, 2023, and GFG is offering 12 months of identity theft protection services through Experian.
TPRM report: https://www.rankiteo.com/company/georgetown-financial-group-inc
"id": "geo408072925",
"linkid": "georgetown-financial-group-inc",
"type": "Breach",
"date": "1/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 466,
'industry': 'Finance',
'name': 'Georgetown Financial Group',
'type': 'Financial Services'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 466,
'personally_identifiable_information': 'Social Security '
'Numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security Numbers'},
'date_detected': '2023-02-01',
'date_publicly_disclosed': '2023-08-11',
'description': "Unauthorized access to an employee's email account at "
'Georgetown Financial Group (GFG) potentially affected 466 '
'individuals, including 2 Maine residents, and involved the '
'compromise of Social Security Numbers.',
'impact': {'data_compromised': ['Social Security Numbers']},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'date_accessed': '2023-08-11',
'source': 'Maine Office of the Attorney General'}],
'response': {'communication_strategy': ['Written notification to affected '
'individuals'],
'remediation_measures': ['Offering 12 months of identity theft '
'protection services through Experian']},
'title': 'Georgetown Financial Group Data Breach',
'type': 'Data Breach'}